—
GO-2026-6520
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule
Quick fix
GO-2026-6520 — github.com/projectcapsule/capsule: upgrade to the fixed version with the command below.
go get github.com/projectcapsule/capsule@v0.13.7Details
Capsule: Tenant owner bypasses Capsule's forbidden namespace/service/node label and annotation enforcement in github.com/projectcapsule/capsule
Are you affected?
Enter the version of the package you're using.
Affected packages
Go/github.com/projectcapsule/capsule
Introduced in:
0Fixed in: 0.13.7Fix
go get github.com/projectcapsule/capsule@v0.13.7References
- https://github.com/projectcapsule/capsule/security/advisories/GHSA-gjw4-3v3v-rqxg[ADVISORY]
- https://github.com/projectcapsule/capsule/commit/755cef54bf4a1bc56d6692130132bc70755bef46[FIX]
- https://github.com/projectcapsule/capsule/pull/1982[FIX]
- https://github.com/projectcapsule/capsule/releases/tag/v0.13.7[WEB]